For what it's worth, in a previous incarnation when I was responding to
subject access requests, I used to include a covering letter with words to
the effect that "here's everything we think we have on you; if you have any
reason to think that there is any more, please let me know as soon as
possible and I'll be glad to investigate."
Software tools would be wonderful, but alas probably a non-existent nirvana
as every platform would need something specific. And most companies will
have proprietary databases etc etc. So there are still going to be jobs for
everyone after all. Phew.
Tim
--
Tim M. Wright
Director - Technology Audit
Charles Schwab Europe
Tel: +44 190 852 7793
Mobile: +44 7932 669 074
Fax: +44 190 852 7593
-----Original Message-----
From: Ian Welton [mailto:[log in to unmask]]
Sent: 31 January 2001 21:30
To: [log in to unmask]
Subject: Re: 40 days or not 40 days that is t
Have personally come to the conclusion that persons involved
in processes or
particular jobs are not always aware of all of the
information which is
available relating to that job, or any person mentioned
within the data in
their area, and cannot always find it all. I know to my
cost that some
subject access requests which are limited to specific data
are not always
easy to deal with when reliance is placed on human memories
or application
specific search mechanisms.
I would be interested to hear of any software tools which
are available and
in use to search networks in order to compile a response to
subject access
requests.
It is not unusual in my circumstances to receive the
occasional subject
access request for all personal data held, which can be
particularly
difficult to deal with effectively, so any tools which can
simplify the task
would be a great boon. The dream search tool would be able
to search e-mail,
word processing, spreadsheets, databases and other
application specific data
containing personal information across an organisational
LAN/WAN. What
about the security headache then though?
Ian W
|